Allow tlsv1 for clients but use tlsv1_3 for ISP trunk

Hi

I have an registrar / isp which when using TLS, requires version 1.3 - DNS NAPTR is used for service discovery.

I have some older sip devices, which most probably only support TLS 1.0

In [transport-tls] which I set method=tlsv1_3 the trunk registers and talls to from the isp work, but some older clients can not register anymore.

I would rather not link the transport to a clients to allow it to choose which transport to use and also be able to use IPv6

I have been trying to tune /etc/ssl/openssl.conf but I have not found a variant which allows asterisk to autonegotiate the tls protocol version per peer.

Is this possible?